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IN THE CLAIMS 

Please amend claim 1 as follows: 

1. (CURRENTLY AMENDED) A method of storing program material in a media 
storage device communicatively coupled to a receiver for subsequent replay, comprising the steps of: 

(a) accepting encrypted access control information and the program material encrypted 
according to a first encryption key in the receiver, the access control information including a first 
encryption key and control data; 

(b) decrypting the received access control information in a conditional access modulo 
rclcascably releasably coupleablc with the receiver to produce the first encryption key; 

(c) decrypting the program material using the first encryption key; 

(d) re-encrypting the program material according to a second encryption key; 

(c) encrypting the second encryption key in the conditional access module according to 
a third encryption key to produce a fourth encryption key; and 

(f) providing the rc-encrypted program material and the fourth encryption key for 

storage. 

2. (ORIGINAL) The method of claim 1, wherein the encrypted access control 
information further comprises remporalry-variant control data, and die method further comprises 
the steps of: 

decrypting the received access control information to produce the temporally-variant control 
data; and 

modifying the temporally variant control data to generate temporally-invariant control dara. 

3. (CANCELED) 



4. (PREVIOUSLY PRESENTED) The method of claim 1, wherein the conditional 
access module is implemented on a smartcard. 
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5. (ORIGINAL) The method of claim 1, wherein the access control information 
further comprises metadata describing ac least one right for the program material. 

6. (ORIGINAL) The method of claim 5, further comprising the step of: 
generating the second encryption key at least in part from the metadata. 

7. (ORIGINAL) The method of claim 1, wherein steps (b)-(f) are performed in 
response to a pre-buy message. 

8. (ORIGINAL) The method of claim 7, wherein the access control information 
further comprises metadata describing ac least one right for the program material, and the method 
further comprises the step of: 

generating replay right data from the metadata. 

9. (ORIGINAL) The method of claim 8, wherein the replay right data is further 
generated from pre-buy data- 

10. (ORIGINAL) The method of claim 1, further comprising the steps of: 
retrieving the stored re-encrypted program material and the fourth encryption key; 
decrypting the fowth encryption key using the third encryption key to produce the second 

encryption key; and 

decrypting the re-encrypted material using the second encryption key. 

11. (ORIGINAL) The method of claim 10, wherein the step of decrypting the fourth 
encryption key using the third encryption key co produce the second encryption key is performed in 
response to a subscriber request to access the program material. 
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1 2. (ORIGINAL) The method of claim 1 1 , wherein the access control information 
further comprises metadata describing at least one right for the program material, the subscriber 
request to access the program material comprises buy data, and the method further comprises the 
steps of: 

generating replay right data from the metadata; 
accepting the buy data; 

comparing the buy data with the replay right data; and 

decrypting the fourth encryption key using the third encryption key co produce the second 
encryption key according to the comparison between the buy data and the repJay right data. 

13. (ORIGINAL) The method of claim 12, wherein steps (b)-(f) are performed in 
response to a pte-buy message, and wherein: 

the second encryption key and the third encryption key are stored in a smartcard, and the 
replay right data is generated from the metadata and the pre -buy message in the smartcard; and 

the steps of accepting the buy data, comparing the buy data with the replay right data, and 
decrypting the fourth encryption key using the third encryption key to produce the second 
encryption key according to the comparison between the buy data and the replay right data are 
performed in the smartcard. 

14. (ORIGINAL) The method of claim 1, wherein the re-encrypted program material 
and the fourth encryption key arc stored on a media storage device. 

1 5. (ORIGINAL) The method of claim 1, wherein the control data is temporally- 

variant 

16. (ORIGINAL) The method of claim 1 5, wherein the temporally-variant control data 
associates an expiration time with the program material. 
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17. (ORIGINAL) An apparatus for storing program material encrypted according to a 
first encryption key for replay, comprising: 

a conditional access module, for accepting encrypted access control information including 
the first encryption key and temporally-variant control data, the control access module comprising: 

a first decryption module, for decrypting the access control information to produce 
the first encryption key, 

a first encryption module, for encrypting a second encryption key with a third 
encryption key to produce a fourth encryption key; and 

a second decryption module for decrypting the fourth encryption key to produce the 
second encryption key. 

18. (ORIGINAL) The apparatus of claim 17, further comprising: 

a tuner, communicatively coupleable to the conditional access module for receiving the 
encrypted access control informarion and the program material encrypted according to a first 
encryption key; 

a third decryption module, for decrypting the program material using the first encryption key 
produced by the conditional access module; 

a second encryption module, for re-encrypting the decrypted program material according to 
the second encryption key; and 

a fourth decryption module, for decrypting the re-encrypted program material according to 
the second encryption key. 

19. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the conditional 
access module further comprises: 

a pre-buy module, for controlling the first decryption module. 

20. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the access 
control informarion further comprises metadata describing at least one right for the program 
material 
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21 . (PREVIOUS] ,Y PRESENTED) The apparatus of claim 20, wherein: 

the conditional access module comprises a pre-buy module fot controlling the first 
decryption module, and fox generating replay right data from the metadata. 

22. (ORIGINAL) The apparatus of claim 21 , further comprising a buy module, 
communicatively coupled to the pre-buy module. 

23. (ORIGINAL) The apparatus of claim 22, wherein the buy module comprises: 

a purchase module for accepting buy data and comparing the buy data and the replay right 
data from the pre-buy module; and 

a control module for controlling the second decryption module based on the comparison 
between the buy data and the replay right data. 

24. (ORIGINAL) The apparatus of claim 23> further comprising a billing module, for 
recording the buy data. 

25. (ORIGINAL) The apparatus of claim 18, wherein the second encryption key is 
stored in the conditional access module. 

26. (ORIGINAL) The apparatus of claim 18, wherein the third encryption key is stored 
in rhe conditional access module. 
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27. (ORIGINAL) The apparatus of claim 17, wherein the conditional access module is 
releaseably communicative coupleable to: 

a tuner for receiving the encrypted access control information and the program material 
encrypted according to a first encryption key; 

a third decryption module, for decrypting the program material using the first encryption key 
from rhe conditional access module 

a second encryption module, for re-encrypting the decrypted program material according to 
the key; and 

a media storage device. 

28. (PREVIOUSLY PRESENTED) An apparatus for storing program material in 51 
media storage device communicatively coupled to a receiver for replay, comprising: 

a receiver, for accepting encrypted access control information and the program material 
encrypted according to a first encryption key, the access control information including a first 
encryption key and control data; 

a conditional access module, releasably coupleable with the receiver for decrypting the 
received access control information to produce the first encryption key; 

means for decrypting the program material using the first encryption key; 

means for re-encrypting the program material using according to a second encryption key; 

means, in the conditional access module, for encrypting the second encryption key according 
to a third encryption key to produce a fourth encryption key; and 

means for providing the re-encrypted program material and a fourth encryption key for 

storage, 

29. (ORIGINAL) The apparatus of claim 28, wherein the encrypted access control 
information further comprises temporally-variant control data, and the apparatus further comprises: 

means for decrypting the received access control information to produce the temporally- 
variant control data; and 

means for modifying the temporally variant control data to generate temporally-invariant 
control data. 
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30. (CANCELED) 

31. (PREVIOUSLY PRESENTED) The apparatus of claim 28, wherein the conditional 
access module is implemented on a smart card, 

32. (ORIGINAL) The apparatus of claim 28, wherein the access control information 
further comprises metadata describing at least one right for the program material. 

33. (ORIGINAL) The apparatus of claim 32, further comprising: 

means for generating the second encryption key at least in part from the metadata. 

34. (ORIGINAL) The apparatus of claim 32, further comprising: 
means for generating replay right data from the metadata. 

35. (ORIGINAL) "1 ne apparatus of claim 34, wherein the means for generating the 
replay right data further generates replay right data from pre-buy data. 

36. (PREVIOUSLY PRESENTED) The apparatus of claim 28, further comprising: 
means for retrieving the stored re-encrypted program material and the fourth encryption key; 
means for decrypting the fourth encryption key using the third encryption key to produce 

the second encryption key; and 

means for decrypting the re-encrypted material using the second encryption key. 

37. (ORIGINAL) The apparatus of claim 36, wherein the means fot decrypting the 
fourth encryption key using the third encryption key to produce the second encryption key is 
performed in response to a subscriber request to access the program material 
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38. (ORIGINAL) The apparatus of claim 37, wherein the access control information 
further comprises metadata describing ac least one right for the program material, the subscriber 
request to access the program material comprises buy data, and the apparatus further comprises: 

means for generating replay righi data from the metadata; 
means for accepting the buy data; 

means for comparing the buy data with the replay right data; and 

means for decrypting the fourth encryption key using the third encryption key to produce 
the second encryption key according to the comparison between the buy data and the replay right 
data. 

39. (ORIGINAL) The apparatus of claim 38, wherein: 

the second encryption key and the third encryption key are stored in a smartcard, and the 
replay right data is generated from the metadata and the pte-buy message in the smartcard; and 

the means for accepting the buy data, means for comparing the buy data with the replay 
right data, and means for decrypting the fourth encryption key using the third encryption key to 
produce the second encryption key according to the comparison between the buy data and the 
replay right data is implemented in the smartcard. 

40. (ORIGINAL) The apparatus of claim 28, wherein the re-encrypted program 
material and the fourth encryption key are stored on a media storage device. 

41 . (ORIGINAL) The apparatus of claim 28, wherein the control data is temporally- 
variant, 

42. (ORIGINAL) The apparatus of claim 41, wherein the temporally-variant control 
data associates an expiration rime with the program material. 

43. (PREVIOUSLY PRESENTED) The method of claim 1 , further comprising 
the step of generating the second encryption key in the conditional access module. 
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44. (PREVIOUSLY PRESENTED) The method of claim 1 , wherein the access 
control information further comprises metadata and the method further comprises the step of 
generating the second encryption key at least in part from die metadata. 

45. (PREVIOUSLY PRESENTED) The method of claim 1 , further comprising 
the srep of: 

augmenting the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module. 

46. (PREVIOUSLY PRESENTED) The method of claim 1, wherein the access 
control information further comprises metadata describing at least one right for the program 
material, and the method further comprises the step of: 

augmenting the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module. 

47. (PREVIOUSLY PRESENTED) The apparatus of claim 20, wherein the 
conditional access module generates rhe second encryption key at least in part from the metadata. 

48. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the access 
control information further comprises metadata and the conditional access module generates the 
second encryption key ar least in part from the metadata. 

49. (PREVIOUSLY PRESENTED) The apparatus of claim 20, wherein the 
conditional access module augments die second encryption key with at least a portion of the 
metadata before encrypting the second encryption key in the conditional access module. 

50. (PREVIOUSLY PRESENTED) The apparatus of claim 1 7, wherein the access 
control information further comprises metadata, and wherein the conditional access module 
augments the second encryption key with at least a portion of the metadata before encrypting the 
second encryption key in the conditional access module. 
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